Jump to content


Photo

Connection status is "invalid query"


  • Please log in to reply
4 replies to this topic

#1 mgordillo

mgordillo

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 26 February 2019 - 06:47 PM

Connection status is "invalid query"

 

I have a DC listed as "Enabled" for "Audit Status", but "Invalid query" for "Connection.

 

 



#2 mgordillo

mgordillo

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 26 February 2019 - 06:54 PM

I've uploaded files to netwrix.com/upload for "ALE Forums Topic 3604" & tracing.zip.  



#3 Kirill K

Kirill K

    Advanced Member

  • Administrators
  • PipPipPip
  • 107 posts
  • Gender:Male

Posted 27 February 2019 - 12:04 PM

Hi there,

 

There is a problem when ALE connects to the audited domain, therefore I have some questions:

Does ALE host belong to audited domain?

Do you have firewall between ALE host and domain controllers?

Are there any problem with network between ALE host and domain controllers?

 

ALE is legacy software and it is difficult to troubleshoot it, I would recommend to use Netwrix Auditor instead, Active Directory auditing part provides almost the same information, the report name is "User Account Status Changes".

 

Just in case you may use community edition of Netwrix Auditor, it is freeware.


Best regards,
Forum Engineer
 


#4 mgordillo

mgordillo

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 27 February 2019 - 08:01 PM

Yes, the ALE host belongs to the audited domain.

There's no firewall between the ALE host and the domain controllers.

I'm not aware of a network problem.

 

hmmm..."User account status changes" just has basic information.



#5 Kirill K

Kirill K

    Advanced Member

  • Administrators
  • PipPipPip
  • 107 posts
  • Gender:Male

Posted 28 February 2019 - 07:29 AM

What kind of information you would like to know?

 

The most important information from my perspective is caller computer name and Netwrix Auditor provides it, moreover depending on a total number of lockouts a day, it might be concluded reasons of why the lockout is occurred.

 

Netwrix Auditor operates with more reliable way of getting data unlike ALE which besides domain controllers, collects data from workstations and it does not guarantee output data integrity until ALE is able to access domain controllers as well as workstations.


Best regards,
Forum Engineer
 





0 user(s) are reading this topic

0 members, guests, anonymous users